Admin
Configures organizations, membership and access for the GRC workspace.
Can
- Manage Organizations, business units, team members, Users
- View Assessments, operation receipts, record attachments
- GRC for Banking and Financial Services
- Roles and permissions
Who can do what in GRC for Banking and Financial Services
Separate assessment preparation, corrective action and independent decisions.
Who can do what
| Role | Assessment planning | Risk and control register | Control testing | Findings and remediation | Independent retests | Assurance review | Evidence and operations |
|---|---|---|---|---|---|---|---|
| Admin | Edit | Edit | — | — | Edit | — | View |
| Assessment Owner | Edit | View | Edit | View | — | — | Edit |
| Control Owner | View | Edit | Edit | Edit | — | — | — |
| Remediation Owner | — | View | View | Edit | Edit | — | — |
| Independent Reviewer | View | — | View | View | Edit | Edit | Edit |
| Risk Manager | View | Edit | View | View | — | — | — |
Each role in detail
Assessment Owner
Scopes assessments and coordinates control testing for an assigned business unit.
Can
- Manage Assessments, assessment tests, record attachments
- View business units, Controls, Risks, Findings
Starts on: Assessment period schedule
Control Owner
Maintains owned controls and supports the evidence used for testing.
Can
- Manage Controls
- View Risks, assessment tests, Findings, Assessments
Starts on: Active controls
Remediation Owner
Plans and updates corrective action work against assigned findings.
Can
- Manage corrective actions
- View Findings, Retests, Controls
Starts on: Corrective actions submitted
Independent Reviewer
Records retests and review decisions separately from preparation and remediation.
Can
- Manage Retests, review decisions, prudential control reviews
- View Assessments, Findings, corrective actions, assessment tests, record attachments
Starts on: Assessment period schedule
Risk Manager
Maintains business-unit risk context and reviews the linked control estate.
Can
- Manage Risks
- View business units, Controls, Assessments, Findings
Starts on: Active controls
Set up GRC for Banking and Financial Services your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.